Issue with ConnectyCube User Session Token Creation - "Unexpected Signature" about connectycube-flutter-samples HOT 23 OPEN

Sorry for asking it on flutter repo but i could not find proper place to ask it

from connectycube-flutter-samples.

according to the server documentation, the parameters for the generation of the signature should be placed in alphabetical order. it means when you add the user to the signature this parameter should be placed there in the alphabetical order too.

from connectycube-flutter-samples.

@jostney I meant the stringForSignature with the user should look next:

const stringForSignature = `application_id=${config.applicationId}&auth_key=${config.authKey}&nonce=${nonce}&timestamp=${timestamp}&user[email]=${emailAddress}&user[password]=${password}`;

from connectycube-flutter-samples.

In docs, the last two params(&user[email]=${emailAddress}&user[password]=${password}) did not mention.

By the way, i modifed stringForSignature as you did, still having same error when calling createSessionWithLogin

const getSignatureForUserSession = (emailAddress, password) => {
  const nonce = Math.floor(Math.random() * 1000000);
  const timestamp = Math.floor(Date.now() / 1000);
  const stringForSignature = `application_id=${config.applicationId}&auth_key=${config.authKey}&nonce=${nonce}&timestamp=${timestamp}&user[email]=${emailAddress}&user[password]=${password}`;
  const signature = crypto.createHmac('sha1', config.authSecret).update(stringForSignature).digest('hex');
  return { signature: signature, timestamp: timestamp, nonce: nonce };
}

const createSessionWithLogin = async (login, password) => {
  const signature = getSignatureForUserSession(login, password);
  
  const requestData = {
    'application_id': config.applicationId,
    'auth_key': config.authKey,
    'nonce': signature.nonce,
    'signature': signature.signature,
    'timestamp': signature.timestamp,
    "user": {
      "email": login,
      "password": password
    }
  };

  return await axios.post(
    'https://api.connectycube.com/session',
    requestData,
    {
      headers: {
        'Content-Type': 'application/json'
      }
    }
  );
};

from connectycube-flutter-samples.

In docs, the last two params(&user[email]=${emailAddress}&user[password]=${password}) did not mention.

the list of available parameters for session creation is provided in that doc at the table bottom

from connectycube-flutter-samples.

Who can assist me about this from back-end team ? In my latest answer i did all required things but still getting unexpected signature

from connectycube-flutter-samples.

@banshiAnton can assist here, I will ask him

from connectycube-flutter-samples.

Hi @jostney
Can you please send stringForSignature before and after hashing and requestData
Send this on our support email [email protected]
because this logs can contain sensitive account information

and double check your config (application_id/auth_key/auth_secret)

from connectycube-flutter-samples.

Sent it, waiting. Thanks

from connectycube-flutter-samples.